April 2010 - Test - lists.nanog.org

192.0.0.0/24
by Lou Katz 01 Apr '10

01 Apr '10

We recently were told to contact a client (via ftp) at 192.0.0.201. IANA lists this as Special Use, but refers to "RFC 3330 for additional information. http://www.rfc-editor.org/rfc/rfc3330.txt". This RFC says that it might be assigned in the future. So, did the folks who sent us the IP address fat-finger, or has this been assigned? There does not appear to be any route to it. -- -=[L]=- `is not a sentence' is not a sentence.

5 5

Home CPE choice - summary
by Charles N Wyble 01 Apr '10

01 Apr '10

Thank you everyone for your replies! :) It's been great having an operational type discussion. Here is my summary of the thread: Software: Linux: Vyatta IPCop Astaro BSD: pfSense m0n0wall (I didn't know this was the base for pfSense until I started researching it today) Appliances: Juniper. I have taken a Juniper course and have the Oreilly book, but I'm a Cisco guy pretty much through and through. Cisco 871 (I see these pop up on craigslist a fair amount. I suppose I'll pick one up and add it to my lab) Fritz!box (not available in the US) :( << I would love to get my hands on one of these. Hardware: Alix/Gumstix/Sokeris Various full desktop systems I got some great hardware sizing advice offline which referenced http://www.pfsense.org/index.php?option=com_content&task=view&id=52&Itemid=… My choice: pfSense on a Dell Optiplex (dual core, 1 gig of ram). I think this should be more then sufficient for performing WAN duties and routing on a stick for my 3548 switch. I currently have an 1841 performing those duties and really like it. However I need it for my cisco cert studies. :) I was originally going to deploy pfSense in a KVM VM, but it appears BSD paravirtualization support may not be up to the level that Linux is at. If anyone has experience with this, please let me know. I have everything else deployed in virtual machines, but after reading a bit it seems that pfSense in a VM would consume a lot of CPU resources even doing moderate amounts of traffic (10 mbps). I don't want to starve out my other virtual machines.

1 0

Juniper Denial of Service vulnerabilities
by J. Oquendo 01 Apr '10

01 Apr '10

A Dual-Homed Swapfile Overflow Error can occur under controlled conditions causing multiple Denials of Service on Juniper SRX platforms. http://www.disgraced.org/junipervulns.html -- =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP "It takes 20 years to build a reputation and five minutes to ruin it. If you think about that, you'll do things differently." - Warren Buffett 227C 5D35 7DCB 0893 95AA 4771 1DCE 1FD1 5CCD 6B5E http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x5CCD6B5E

1 0

Re: Home CPE choice
by Patrick Vande Walle 01 Apr '10

01 Apr '10

On Thu, 01 Apr 2010 01:04:29 +0100, Nick Hilliard <nick(a)foobar.org> wrote: > On 31/03/2010 23:55, Charles N Wyble wrote: >> What good off the shelf solutions are out there? Should one buy the high >> end d-link/linksys/netgear products? I've had bad experiences with those >> (netgear in particular). > > Some people have said that the Fritz!box is quite good. No idea if it's > approved for use in the US. > > Nick The latest Fritz!Box is delivered with firmware that supports IPv6 (native, SixXS and 6to4 tunnels). They can do VoIP, too, and even include a built-in phone answering machine forwarding messages through email. There are official IPv6-enabled firmwares available for several models. They are not cheap but the quality is there. The manufacturer has been very responsive to advanced users expectations. If, for whatever reason the ADSL/VDSL modem part does not work well with your ISP, it can be used as a router only, with whatever cheapo modem that works in your area. http://www.avm.de/en/ Patrick Vande Walle -- Blog: http://patrick.vande-walle.eu Twitter: http://twitter.vande-walle.eu

1 0

Re: Home CPE choice
by jonesnco＠gmail.com 01 Apr '10

01 Apr '10

Netscreen 5GTs will also do IPv6 with some ScreenOS 5.4 code revs (5.4.0r10.0 for sure). Those pop up on Ebay for $60ish and make respectable home CPE devices. Not quite the horsepower of the SSG5 but they seem to hold up reasonably well. Dan Jones > Juniper's SSG5 and SRX100 are nice options for home. I've enjoyed an SSG5 > for awhile now. SRX100 for junos. SSG5's pop up on ebay occasionally for a > few $100. > -Iain > On Wed, Mar 31, 2010 at 4:18 PM, Marty Anstey > <marty.anstey(a)sunwave.net>wrote: > > > > Hopefully this e-mail is considered operational content :) > > > > > > The recent thread on the new linkys kit and ipv6 support got me > > thinking about CPE choice. > > > > What good off the shelf solutions are out there? Should one buy the > > high end d-link/linksys/netgear products? I've had bad experiences > > with those (netgear in particular). > > > > Should one get a "real" cisco router? The 877 or something? Maybe an > > ASA or the new small business targeted ISR (can't recall the model > > number off hand right now). There is mikrotik but I'm not so sure > > about the operating system. > > > > Is there a market for a new breed of CPE running OpenWRT or pfsense on > > hardware with enough CPU/RAM to not fall over? > > > > Granted that won't cost $79.00 at best buy. However it seems to me > > that decent CPE is going to run a couple hundred dollars in order to > > have sufficient ram/cpu. > > > > My current home router is a cisco 1841. I keep my 6mbps DSL line > > pretty much saturated all the time. Often times my wife will be > > watching Hulu in the living room, I'll be streaming music and running > > torrents (granted I have tuned my Azures client fairly well) all at > > the same time and it's a good experience. Running that kind of > > traffic load through my linksys would cause it to need a reboot once > > or more a day. > > > > What are folks here running in SOHO environments that doesn't require > > too frequent oil changes :) > > > > > I run FreeBSD on a PIII; I can easily saturate my 15mbit cable > connection without it breaking a sweat. I also have a couple Cisco > 2610's, one of which is my ipv6 tunnel endpoint. > -M -- -- - Iain Morris iain.t.morris(a)gmail.com

2 1

Home CPE choice
by Charles N Wyble 01 Apr '10

01 Apr '10

Hopefully this e-mail is considered operational content :) The recent thread on the new linkys kit and ipv6 support got me thinking about CPE choice. What good off the shelf solutions are out there? Should one buy the high end d-link/linksys/netgear products? I've had bad experiences with those (netgear in particular). Should one get a "real" cisco router? The 877 or something? Maybe an ASA or the new small business targeted ISR (can't recall the model number off hand right now). There is mikrotik but I'm not so sure about the operating system. Is there a market for a new breed of CPE running OpenWRT or pfsense on hardware with enough CPU/RAM to not fall over? Granted that won't cost $79.00 at best buy. However it seems to me that decent CPE is going to run a couple hundred dollars in order to have sufficient ram/cpu. My current home router is a cisco 1841. I keep my 6mbps DSL line pretty much saturated all the time. Often times my wife will be watching Hulu in the living room, I'll be streaming music and running torrents (granted I have tuned my Azures client fairly well) all at the same time and it's a good experience. Running that kind of traffic load through my linksys would cause it to need a reboot once or more a day. What are folks here running in SOHO environments that doesn't require too frequent oil changes :)

16 20

Charter North Texas - IP Services Contact
by Nick Hale 01 Apr '10

01 Apr '10

Can I get an off-list reply from a Charter Cable admin for the North Texas area? (This is for IP services and/or residental cable services) Thank you! ___________________________________ Regards, Nick Hale Abuse Administrator nhale(a)softlayer.com <mailto:nhale@softlayer.com> 866.398.7638 toll-free 214.442.0601 fax 6400 International Parkway, Suite 2000 Plano, TX 75093 http://www.softlayer.com <http://www.softlayer.com/>

1 0

[Fwd: [members-discuss] [ncc-announce] RIPE NCC Position On The ITU IPv6 Group]
by Adam Waite 01 Apr '10

01 Apr '10

I didn't see this on NANOG yet, but it's caused a stir on the RIPE list.

32 60